Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/FwZaT3XvQXxFE6oAS4ZUTIqmc48.roa
File: FwZaT3XvQXxFE6oAS4ZUTIqmc48.roa (raw, json)
Hash identifier: I0jbawWT+e5EzWsasz85VtByC8OK60nptzHFEGhzAxU=
Subject key identifier: 17:06:5A:4F:75:EF:41:7C:45:13:AA:00:4B:86:54:4C:8A:A6:73:8F
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0188E3E999222E3AD3A4EE22A78F43133766
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/FwZaT3XvQXxFE6oAS4ZUTIqmc48.roa
Signing time: Thu 22 Jun 2023 16:21:57 +0000
ROA not before: Thu 22 Jun 2023 16:21:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202943
IP address blocks: 91.242.82.0/24 maxlen: 24
91.242.82.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:e9:99:22:2e:3a:d3:a4:ee:22:a7:8f:43:13:37:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jun 22 16:21:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17065a4f75ef417c4513aa004b86544c8aa6738f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:89:8e:56:41:ce:d5:1e:ad:63:28:df:99:75:
10:65:61:01:8c:c7:ec:a4:78:b3:7c:70:47:96:c8:
5a:a8:da:f5:2d:d0:b0:b3:cc:5b:07:f6:f5:57:d6:
79:07:b5:66:6e:32:b2:a9:58:f0:23:90:ae:01:0c:
dd:06:fc:0e:04:96:60:d4:47:b2:61:35:50:6a:6c:
8b:b5:0e:dd:30:13:34:0a:c3:8b:19:38:21:02:49:
30:e7:0e:71:eb:7e:3c:70:a3:d4:35:dc:13:f2:9f:
0c:b6:1a:6c:c2:51:68:74:7b:ec:47:bd:86:37:5d:
5c:c3:37:79:16:9e:6b:83:bf:9b:b0:3e:ea:17:4d:
46:91:f0:e6:ca:32:da:20:3a:31:3e:fd:04:06:a1:
8a:41:bf:81:6f:37:72:c3:1c:90:29:05:97:90:de:
e9:93:c0:3e:68:a2:af:6c:53:01:de:03:a5:d8:28:
23:97:2d:2c:ba:ac:04:8c:59:c0:03:44:d3:ad:67:
66:4d:11:f4:8b:04:7a:ec:1c:da:7c:16:6c:a9:d0:
83:e9:b6:73:36:ea:f0:e7:57:eb:d9:4c:4c:b0:be:
87:79:52:7a:6e:59:58:b5:58:5b:91:d0:2e:16:5b:
17:11:e6:4e:8a:0a:05:9b:43:2d:82:c3:a9:e1:43:
bf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:06:5A:4F:75:EF:41:7C:45:13:AA:00:4B:86:54:4C:8A:A6:73:8F
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/FwZaT3XvQXxFE6oAS4ZUTIqmc48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.82.0/23
Signature Algorithm: sha256WithRSAEncryption
17:98:96:43:35:8a:f9:da:af:6f:3b:7a:88:25:50:6a:e0:e8:
b0:1c:b6:41:0f:a9:ea:94:13:74:a7:e8:07:61:32:f7:12:fe:
34:32:86:19:3d:1c:a2:85:5f:99:51:e6:93:52:74:ad:b9:39:
65:85:4f:b6:cd:d5:5a:9b:e4:76:98:55:3d:62:34:77:08:ee:
33:28:11:12:12:bb:1b:48:d3:f5:6b:a6:ae:9d:b4:35:85:16:
e9:25:c9:81:1d:4c:61:d0:46:c6:98:82:a2:6f:20:03:94:8f:
d6:be:91:9c:d4:e7:c8:7a:31:90:27:aa:a5:a0:10:47:1f:ee:
29:ca:4b:46:3c:e9:3b:01:e8:7f:64:30:47:b8:26:5a:d4:6e:
cf:a0:73:d8:01:9c:15:f8:b0:30:ea:c6:fd:38:e2:5d:c0:11:
be:f4:1d:86:90:d0:8d:34:c2:41:19:67:a4:8f:21:21:08:cd:
f2:54:07:83:b7:71:cf:ae:c5:13:68:63:93:1b:35:9b:8b:8b:
42:96:e4:e2:0a:6a:e8:9d:49:aa:fa:ab:92:fa:8e:9d:1a:32:
dd:63:00:e4:95:65:6b:3b:80:55:6a:bc:d9:50:6f:5f:c7:7b:
82:2e:c7:36:09:73:df:d6:f1:58:54:e6:90:f7:f7:a1:77:08:
b5:68:b1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:06 2024 by rpki-client on console-ams.rpki-client.org